{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/meraki-mx--3.12.4.0/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":5.5,"id":"CVE-2026-76462"},{"cvss":9.8,"id":"CVE-2026-76466"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Expressway Series (\u003c X15.5.20)","Unified Communications Manager","Unified Communications Manager IM \u0026 Presence Service","Unified Communications Manager Session Management Edition","Unity Connection","Emergency Responder","Prime Collaboration Deployment","Snort 3 (\u003c 3.12.4.0)","Cyber Vision (\u003c 3.12.4.0)","CDFW (\u003c 3.12.4.0)","Meraki MX (\u003c 3.12.4.0)","CSA","Secure Firewall ASA (\u003c 3.12.4.0)","Secure FMC (\u003c 3.12.4.0)","Secure FTD","UTD for IOS XE","IOS XR","Secure Client"],"_cs_severities":["high"],"_cs_tags":["vulnerability","cisco","patch-management"],"_cs_type":"threat","_cs_vendors":["Cisco"],"content_html":"\u003cp\u003eCisco released security updates addressing 34 vulnerabilities across multiple product lines, including Expressway Series, Unified Communications products, Snort 3, IOS XR, and Secure Client. The vulnerabilities include critical-severity flaws capable of remote code execution (RCE), authentication bypass, and denial-of-service (DoS). Cisco reports no evidence of active exploitation in the wild as of the release date.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of critical vulnerabilities, such as CVE-2026-76466 in the Expressway Series, could allow an unauthenticated attacker to execute arbitrary commands with root privileges on the underlying operating system. Other vulnerabilities in Unified Communications and Snort 3 permit unauthorized resource access, authentication bypass, or arbitrary command execution.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory systems running Cisco Expressway Series, Unified Communications Manager (and related products), and Snort 3 deployments.\u003c/li\u003e\n\u003cli\u003eUpgrade Cisco Expressway Series to version X15.5.20 or later.\u003c/li\u003e\n\u003cli\u003eUpgrade Snort 3 to version 3.12.4.0 or later.\u003c/li\u003e\n\u003cli\u003eApply the corresponding security updates for peripheral products including Cyber Vision, CDFW, Meraki MX, Secure Firewall ASA, Secure FMC, Secure FTD, and UTD for IOS XE.\u003c/li\u003e\n\u003cli\u003eMonitor Cisco’s official security advisories page for specific upgrade paths for impacted Unified Communications products.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-22T10:47:10Z","date_published":"2026-10-22T10:47:10Z","id":"https://feed.craftedsignal.io/briefs/2026-10-cisco-security-patches/","summary":"Cisco has patched 34 vulnerabilities, including critical-severity remote code execution and authentication bypass flaws, affecting Expressway Series, Unified Communications products, and Snort 3.","title":"Cisco Security Updates for Expressway, Unified Communications, and Snort 3","url":"https://feed.craftedsignal.io/briefs/2026-10-cisco-security-patches/"}],"language":"en","title":"CraftedSignal Threat Feed - Meraki MX (\u003c 3.12.4.0)","version":"https://jsonfeed.org/version/1.1"}